Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

CVE-2022-23307

Related Vulnerabilities: CVE-2022-23307  

A flaw was found in the log4j 1.x chainsaw component, where the contents of certain log entries are deserialized and possibly permit code execution. This flaw allows an attacker to send a malicious request with serialized data to the server to be deserialized when the chainsaw component is run.

Source

Description

A flaw was found in the log4j 1.x chainsaw component, where the contents of certain log entries are deserialized and possibly permit code execution. This flaw allows an attacker to send a malicious request with serialized data to the server to be deserialized when the chainsaw component is run.

Additional Information

  • Bugzilla 2041967: CVE-2022-23307 log4j: A deserialization flaw could lead to malicious code execution
  • CWE-502: Deserialization of Untrusted Data
  • FAQ: Frequently asked questions about CVE-2022-23307

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook

Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started